
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa
File: fc7d5805-7bd5-3dfe-9943-9059063f3200.roa (raw, json)
Hash identifier: ILhi/nn756xV9ROVohu5w38kkSeLiiifBdqX/N/TtEg=
Subject key identifier: 42:27:B4:F4:0A:76:34:AD:28:43:EC:EB:E3:EE:D6:69:7C:CB:EB:F7
Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial: 010D0C9F4328584B9EACEE959BAAC8B9CBC11D80
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa
Signing time: Thu 23 Oct 2025 18:33:51 +0000
ROA not before: Thu 23 Oct 2025 18:33:51 +0000
ROA not after: Wed 21 Jan 2026 19:33:51 +0000
asID: 22611
IP address blocks: 168.235.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:ac:ee:95:9b:aa:c8:b9:cb:c1:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Validity
Not Before: Oct 23 18:33:51 2025 GMT
Not After : Jan 21 19:33:51 2026 GMT
Subject: CN=888f3b1d-5a4d-417a-919f-2bbdadde48af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:f0:0d:ee:80:f7:c8:78:ea:0c:ee:d2:cc:
13:0b:f5:1e:9d:6a:b4:ea:45:ac:f0:94:d8:21:eb:
3d:c0:25:a7:d7:b0:03:01:2d:bc:a6:6b:ff:cd:38:
a7:68:dd:e8:e7:2b:1f:4e:b7:c5:c7:bc:64:9b:37:
44:ed:dc:9b:b8:7d:5e:af:64:74:9a:f2:78:a9:b0:
ba:5e:29:1a:26:93:8b:a3:21:5d:95:02:0a:e7:bf:
3f:0a:14:b6:31:a3:07:31:cb:92:6b:51:e2:2b:2d:
98:dc:dd:2d:6d:c2:9e:18:37:c5:c8:46:93:bf:40:
f6:65:65:68:8f:cf:4e:e5:6b:bc:93:76:7b:55:a4:
af:e2:0e:b8:29:5e:4f:98:ee:5e:fb:a2:35:78:f8:
b6:f5:14:05:75:48:a3:cf:c1:b6:ed:b4:46:75:a1:
48:a7:74:29:9c:80:63:3b:d8:46:45:f0:e2:37:fc:
c6:e5:cf:6f:99:0a:12:5d:82:bd:45:d3:c4:a0:c6:
90:de:8c:a2:06:3e:9f:8c:f3:2f:29:30:7f:18:84:
cc:64:6c:fe:ee:88:c3:c6:b9:84:7e:b8:92:52:1c:
f2:fa:a0:85:20:08:1f:1e:df:09:21:f1:c4:b6:9f:
ea:a9:b0:4a:36:a5:a7:01:19:78:a6:3a:73:16:b5:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:B4:F4:0A:76:34:AD:28:43:EC:EB:E3:EE:D6:69:7C:CB:EB:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
X509v3 Authority Key Identifier:
keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
sbgp-ipAddrBlock: critical
IPv4:
168.235.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:20:a7:39:0f:ca:75:fb:85:b6:29:cf:14:2c:fa:fc:2c:3c:
23:d9:3a:a5:a2:86:c0:72:40:5e:61:cd:f7:f3:22:fc:d9:af:
59:2c:85:22:61:e6:c1:3e:8e:8f:20:5d:af:11:3b:7c:6b:26:
b2:bb:a1:46:ed:b8:df:95:d2:ec:75:eb:4d:d7:7e:b1:56:80:
68:88:75:bf:0a:46:5f:43:27:00:32:e5:59:39:1f:fc:83:c4:
0b:e8:05:78:46:35:0d:e5:fc:a5:e3:97:01:3e:04:a5:7c:5d:
53:c6:62:9a:6c:e8:2a:ca:38:2f:2e:4f:d0:a6:bc:50:b8:21:
4a:bb:6d:e7:87:20:ae:b2:3e:12:09:09:70:79:8f:f7:32:f3:
cf:f8:ab:5a:9a:a3:39:b3:bd:33:ee:8c:2f:5a:be:e2:0f:17:
79:d2:af:27:2b:c2:d7:8d:d3:01:5b:37:33:f9:5f:58:b7:19:
00:1a:ec:a8:f9:da:ff:8d:08:07:75:f4:8e:55:7a:e5:bd:50:
b6:de:67:1c:c5:96:57:d4:a1:fc:80:b1:06:df:69:f0:f3:35:
38:5e:68:cc:a1:c0:79:5e:c2:46:c6:8c:5c:47:52:72:3e:a0:
4f:41:3b:0a:fe:cc:48:ac:72:20:a7:22:b2:3f:df:76:3f:f0:
49:60:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:38:06 2025 by rpki-client